A858DE45F56D9BC9 archive

201208170519 yc735

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 936

Metadata

Post ID
yc735
Title
201208170519 → 2012-08-17 05:19 on A858's clock
Posted (UTC)
2012-08-16 20:19:08
Timezone
UTC+9 · title 05:19 against posted 20:19 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170519) = 57775e48de76b1003097a6c09e4c43c0 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(936).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
48 · predicted N = 34 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170519 (name+title). Key = MD5(password) = 57775e48de76b1003097a6c09e4c43c0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a630d778-f470-634f-9b09-51b8c51d2f54
  2 9ad723f8-5b61-4747-826a-03a2f1268de2
  3 00493e81-1204-0e1f-a97b-c639e7dc873b
  4 fae9e09c-9cdc-3e0a-b4e3-f39f0c01d81e
  5 1e5e6895-a4e9-7d97-8f76-f5239a86ac41
  6 2c28dbcf-cb30-4fa5-b011-7a0f554e6deb
  7 7d2a02b5-9d94-2788-95fb-880d26b6f1b4
  8 77fd236b-6223-0e24-b0d4-2ccb2412c3ff
  9 64b7505d-c668-6353-aa41-eef190c683d6
 10 ef2096cc-fb30-3cf8-88ac-b762dd4be872
 11 8befae94-8119-70aa-8039-6240471b6c0e
 12 9b9137be-8b49-1983-a888-c1291b0b78c5
 13 d4c2b8d5-e609-0d76-bcc5-d182cc45cbaf
 14 5a97f917-3059-3bf3-9d9f-c938bf9a3771
 15 1c010e90-f698-1f6d-9f72-531b6e096672
 16 46d4731e-8627-52a3-8fa2-82b2ad4283f0
 17 30228009-d481-2de9-a9dc-db0566a1f4f1
 18 8627bad7-c219-2746-93d7-043db8f77dc5
 19 e097fdc5-5ba1-0920-a1de-8649bd184ef9
 20 b86df511-9546-62a9-ab71-99912f49c4c7
 21 3bb00055-3824-1d24-9112-2f82af94e4d8
 22 fb87627b-9bf3-4f3f-b11c-b246b166e6bf
 23 c8f21624-d60e-116d-a40c-189ed31b0774
 24 d97dbe93-4308-0698-bfbb-b80ab8ceac81
 25 aa2b8930-d32e-3f45-ba8e-0209644752c2
 26 9302a1e5-bd59-4409-b24e-211f06003d4e
 27 06c8226e-deb3-6f2d-ae6f-c99df60c4ea7
 28 1ba41dc2-ead0-50a5-bce0-dc8741318102
 29 5d46a748-1ca0-0e62-85e1-a45bcc224654
 30 10bcf9ba-e2d5-8bfc-aa12-0b587fa6738d
 31 1a47e3f2-da22-6265-b962-478c58996384
 32 bdac80e4-d96e-025f-81bb-341bab9d484e
 33 bb26ec50-6127-6ec4-aace-d63c762ae73d
 34 d9b9b73b-7de0-4fde-bb32-34905599e3ad

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6403742063710315220614103465086064. Exactly this sequence comes out of new Random(936).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 48 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results